SQL Injection vulnerability exists in PHPGURUKUL Employee Record Management System 1.2 via the Email POST parameter in /forgetpassword.php.
References
Link | Resource |
---|---|
https://www.exploit-db.com/exploits/50467 | Exploit Third Party Advisory VDB Entry |
https://www.nu11secur1ty.com/2021/12/cve-2021-43451.html | Exploit Third Party Advisory |
https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/PHPGURUKUL/ANUJ%20KUMAR/Employee-Record-Management-System-SQL-Injection | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2021-12-01 11:15
Updated : 2021-12-22 09:23
NVD link : CVE-2021-43451
Mitre link : CVE-2021-43451
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
employee_record_management_system_project
- employee_record_management_system